3[.]5[.]0_44294[.]exe | Triage

Sharing

General

Target

3.5.0_44294.exe
Size

4.8MB
MD5

095b15df0436165c8bb623e2a302928c
SHA1

084c27fca0fd409a86958e0296d14a9826c2da17
SHA256

de73eda77089d4194ed8905b846347d4c6fc3b5551fed4eef6db90769f052d68
SHA512

7976d0bc7d460727a261ef1f206dd076108b25eb71bfaca749e9cc27cad4f2ea86c75d33a6ac88aebcb06ab68a39c28d3e1bfcfa8d322feacf109314d48ad5bd
SSDEEP

98304:uwjPyCEckedp0aUB2RXFdbznf4L9fRRVOhrkZ8:ukPlwihmS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3.5.0_44294.exe

Files

3.5.0_44294.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 744KB - Virtual size: 743KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 140KB - Virtual size: 388KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ